AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in this application: 

Listing of claims: 

1. Claims 1-25 (Canceled) 

26. (New) A method of network control, comprising: 

collecting real-time operation information on one or more first network elements 
of a network; 

selecting a policy to be implemented by at least one second network element, 
different from the first network element, responsive to the collected real time 
information from the one or more first network elements, the at least one second element 
including an end-point element of the network and hosting an agent, and enforcing the 
selected policy on the agent hosted by the at least one second network element. 

27. (New) A method according to claim 1, wherein collecting real-time operation 
information comprises collecting information on operation problems. 

28. (New) A method according to claim 2, wherein collecting real-time operation 
information comprises collecting information on applications that do not operate or 
operate slowly. 

29. (New) A method according to claim 2, wherein collecting real-time operation 
information comprises collecting information on system or application crashes. 

30. (New) A method according to claim 1, wherein collecting real-time operation 
information comprises collecting information on software applications installed or 
running on the network elements. 



LIBNY/4497 132.1 



Page 3 of 6 



31. 



(New) A method according to claim 1, wherein collecting real-time operation 
information comprises collecting information on the communications between elements 
of the network. 



32. (New) A method according to claim 1, wherein selecting the policy to be implemented 
comprises selecting a policy relating to a software to be installed on the second network 
element. 

33. (New) A method according to claim 1, wherein selecting the policy to be implemented 
comprises selecting a policy relating to a software to be uninstalled from the second 
network element. 

34. (New) A method according to claim 1, wherein selecting the policy to be implemented 
comprises selecting a policy relating to preventing installation of a software on the 
second network element. 

35. (New) A method according to claim 1, wherein selecting the policy to be implemented 
comprises selecting responsive to a determination that a group of network elements 
having a common problem have installed thereon a specific software application or 
combination of software applications. 

36. (New) A method according to claim 1, wherein selecting the policy to be implemented 
comprises selecting a policy relating to allocation of network resources. 

37. (New) A method according to claim 1, wherein the policy is selected within less than 60 
minutes from the collecting of the information. 

38. (New) A method according to claim 1, wherein collecting the operation information is 
performed repeatedly. 
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39. (New) A method according to claim 1, wherein the method is adapted to select the policy 
to be implemented by the at least one second network element responsive to operation 
information collected from at least 2 first network elements. 

40. (New) A network management system, comprising: 

an input interface; 

an output interface; and 

a processor adapted to collect attribute values from a plurality of network 
elements of a network through the input interface, to find groups of network 
elements having similar attribute values for a plurality of attributes and to transmit a 
policy selected responsive to the groups, through the output interface. 

41 . (New) A system according to claim 1 5, wherein the processor is adapted to find, for a 
group of network elements having a problem, a combination of attribute values that 
correlate with the problem to at least a predetermined degree. 

42. (New) A system according to claim 15, wherein the processor is adapted to find, for a 
group of network elements having a problem, a combination of attribute values that 
appears only on the network elements having the problem. 

43. (New) A system according to claim 15, wherein the processor is adapted to collect for at 
least one network element, a plurality of snapshot records of the network element at 
different times. 

44. (New) A system according to claim 15, wherein the processor is adapted to verify that 
each network element belongs to the network before collecting information from the 
network element. 

45. (New) A system according to claim 1 5, wherein the processor is adapted to find groups 
using a k-clustering or hierarchy clustering method. 
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